<script>document.write('<div>Hello <script>evil\u003C/script></div>');</script>